<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: clearpass policy manager</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2024-53672: A vulnerability in the ClearPass Policy Manager web-based management interface allows remote authenticated use</title><link>https://patchthecve.com/cve/CVE-2024-53672.html</link><guid>https://patchthecve.com/cve/CVE-2024-53672.html</guid><pubDate>Wed, 17 Jun 2026 08:09:04 +0000</pubDate><description>MEDIUM 4.7: A vulnerability in the ClearPass Policy Manager web-based management interface allows remote authenticated users to run arbitrary commands on the underlying host. Successful exploit could allow an attacker to execute arbitrary commands as a lower privileged user on the underlying operating system.</description></item><item><title>CVE-2024-51773: A vulnerability in the HPE Aruba Networking ClearPass Policy Manager web-based management interface could allo</title><link>https://patchthecve.com/cve/CVE-2024-51773.html</link><guid>https://patchthecve.com/cve/CVE-2024-51773.html</guid><pubDate>Wed, 17 Jun 2026 08:06:18 +0000</pubDate><description>MEDIUM 4.8: A vulnerability in the HPE Aruba Networking ClearPass Policy Manager web-based management interface could allow an authenticated remote Attacker to conduct a stored cross-site scripting (XSS) attack. Successful exploitation could enable a threat actor to perform any actions the user is authorized to</description></item><item><title>CVE-2024-51772: An authenticated RCE vulnerability in the ClearPass Policy Manager web-based management interface allows remot</title><link>https://patchthecve.com/cve/CVE-2024-51772.html</link><guid>https://patchthecve.com/cve/CVE-2024-51772.html</guid><pubDate>Wed, 17 Jun 2026 08:06:18 +0000</pubDate><description>MEDIUM 6.4: An authenticated RCE vulnerability in the ClearPass Policy Manager web-based management interface allows remote authenticated users to run arbitrary commands on the underlying host. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.</description></item><item><title>CVE-2024-51771: A vulnerability in the HPE Aruba Networking ClearPass Policy Manager web-based management interface could allo</title><link>https://patchthecve.com/cve/CVE-2024-51771.html</link><guid>https://patchthecve.com/cve/CVE-2024-51771.html</guid><pubDate>Wed, 17 Jun 2026 08:06:18 +0000</pubDate><description>HIGH 7.2: A vulnerability in the HPE Aruba Networking ClearPass Policy Manager web-based management interface could allow an authenticated remote threat actor to conduct a remote code execution attack. Successful exploitation could enable the attacker to run arbitrary commands on the underlying operating syst</description></item><item><title>CVE-2024-5486: A vulnerability exists in ClearPass Policy Manager that allows for an attacker with administrative privileges </title><link>https://patchthecve.com/cve/CVE-2024-5486.html</link><guid>https://patchthecve.com/cve/CVE-2024-5486.html</guid><pubDate>Wed, 17 Jun 2026 08:16:02 +0000</pubDate><description>MEDIUM 5.8: A vulnerability exists in ClearPass Policy Manager that allows for an attacker with administrative privileges to access sensitive information in a cleartext format. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network servi</description></item><item><title>CVE-2024-41916: A vulnerability exists in ClearPass Policy Manager that allows for an attacker with administrative privileges </title><link>https://patchthecve.com/cve/CVE-2024-41916.html</link><guid>https://patchthecve.com/cve/CVE-2024-41916.html</guid><pubDate>Wed, 17 Jun 2026 07:48:26 +0000</pubDate><description>MEDIUM 6.8: A vulnerability exists in ClearPass Policy Manager that allows for an attacker with administrative privileges to access sensitive information in a cleartext format. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network servi</description></item><item><title>CVE-2024-41915: A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated</title><link>https://patchthecve.com/cve/CVE-2024-41915.html</link><guid>https://patchthecve.com/cve/CVE-2024-41915.html</guid><pubDate>Wed, 17 Jun 2026 07:48:26 +0000</pubDate><description>HIGH 7.2: A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. An attacker could exploit this vulnerability to obtain and modify sensitive information in th</description></item><item><title>CVE-2024-26302: A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacke</title><link>https://patchthecve.com/cve/CVE-2024-26302.html</link><guid>https://patchthecve.com/cve/CVE-2024-26302.html</guid><pubDate>Wed, 17 Jun 2026 07:17:34 +0000</pubDate><description>MEDIUM 4.8: A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker authenticated with low privileges to access sensitive information. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to</description></item><item><title>CVE-2024-26301: A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacke</title><link>https://patchthecve.com/cve/CVE-2024-26301.html</link><guid>https://patchthecve.com/cve/CVE-2024-26301.html</guid><pubDate>Wed, 17 Jun 2026 07:17:34 +0000</pubDate><description>MEDIUM 6.5: A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker authenticated with low privileges to access sensitive information. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to</description></item><item><title>CVE-2024-26300: A vulnerability in the guest interface of ClearPass Policy Manager could allow an authenticated remote attacke</title><link>https://patchthecve.com/cve/CVE-2024-26300.html</link><guid>https://patchthecve.com/cve/CVE-2024-26300.html</guid><pubDate>Wed, 17 Jun 2026 07:17:34 +0000</pubDate><description>MEDIUM 6.6: A vulnerability in the guest interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary script code in a victim&#x27;</description></item><item><title>CVE-2024-26299: A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated</title><link>https://patchthecve.com/cve/CVE-2024-26299.html</link><guid>https://patchthecve.com/cve/CVE-2024-26299.html</guid><pubDate>Wed, 17 Jun 2026 07:17:34 +0000</pubDate><description>MEDIUM 6.6: A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary script co</description></item><item><title>CVE-2024-26298: Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated user</title><link>https://patchthecve.com/cve/CVE-2024-26298.html</link><guid>https://patchthecve.com/cve/CVE-2024-26298.html</guid><pubDate>Wed, 17 Jun 2026 07:17:34 +0000</pubDate><description>HIGH 7.2: Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete </description></item><item><title>CVE-2024-26297: Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated user</title><link>https://patchthecve.com/cve/CVE-2024-26297.html</link><guid>https://patchthecve.com/cve/CVE-2024-26297.html</guid><pubDate>Wed, 17 Jun 2026 07:17:33 +0000</pubDate><description>HIGH 7.2: Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete </description></item><item><title>CVE-2024-26296: Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated user</title><link>https://patchthecve.com/cve/CVE-2024-26296.html</link><guid>https://patchthecve.com/cve/CVE-2024-26296.html</guid><pubDate>Wed, 17 Jun 2026 07:17:33 +0000</pubDate><description>HIGH 7.2: Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete </description></item><item><title>CVE-2024-26295: Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated user</title><link>https://patchthecve.com/cve/CVE-2024-26295.html</link><guid>https://patchthecve.com/cve/CVE-2024-26295.html</guid><pubDate>Wed, 17 Jun 2026 07:17:33 +0000</pubDate><description>HIGH 7.2: Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete </description></item><item><title>CVE-2024-26294: Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated user</title><link>https://patchthecve.com/cve/CVE-2024-26294.html</link><guid>https://patchthecve.com/cve/CVE-2024-26294.html</guid><pubDate>Wed, 17 Jun 2026 07:17:33 +0000</pubDate><description>HIGH 7.2: Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete </description></item></channel></rss>